Abstract:The security of satellite and space systems has become a pressing concern in recent years as various high-profile incidents involving satellite-based internet access have been observed in the context of the war in Ukraine. An increase in threat level is partly due to a) rapid advancements in affordable software-defined communications equipment, which have made it easier for attackers to gain communication capabilities with orbital assets and b) the increasing adoption of commercial off-the-shelf hardware and software components in spacecraft enhancing affordability and exposing potential vulnerabilities more easily. A recent study revealed that satellite software typically lacks sufficient protection against unauthorized access. However, it remains unclear how this inherent lack of security is critical to other satellites in orbit as no public work exists on cybersecurity reconnaissance. Hence, to date, identifying non-standard commands and assessing potential vulnerabilities are deemed challenging steps for attackers to perform.In light of this current state, this paper analyzes how attackers may conduct reconnaissance on satellites’ capabilities without targeting the ground segment. We develop strategies that attackers may employ to evaluate satellites’ capabilities using a satellite implementation that adheres to the ECSS-standardized Telecommand on top of a CCSDS protocol stack. Our considered strategies encompass enumeration methods to identify the subset of the standard implemented, including non-standardized functionalities. Additionally, we present strategies to analyze implementation-specific aspects of CCSDS’ Space Data Link Security (SDLS) Protocol, which serves as the primary security protocol within the CCSDS protocol family. Our strategies test the potential for timing side channels, fault-message-based enumeration, and payload length enumeration testing. To evaluate the effectiveness of our strategies, we apply them to a real-world satellite and measure their success rate.

Research on encryption, authentication and key update mechanism for CCSDS-TC protocol

Research on the Authenticated Encryption Technology in CCSDS.

ATCS: an Adaptive TCP Coding Scheme for Satellite IP Networks

New Low-Earth Orbit Satellites Authentication and Group Key Agreement Protocol

Modeling Of Satellite Communication Systems Design With Physical Layer Security

Effective Methods and Performance Analysis of a Satellite Network Security Mechanism Based on Blockchain Technology

A Lightweight and Secure Authentication Protocol for Space-Ground Integrated Network of Railway

A novel authentication and key‐agreement scheme for satellite communication network

Key Secure Technologies for Optical Satellite Network

Secure and Efficient Token Based Roaming Authentication Scheme for Space-Earth Integration Network

A Secure and Efficient Authentication Protocol for Satellite-Terrestrial Networks

A Survey of Secure Communications for Satellite Internet Based on Cryptography and Physical Layer Security

Research on Adaptive Communication Method of Inter-satellite Link in Satellite Group System

LK-AKA: A lightweight location key-based authentication and key agreement protocol for S2S communication

Research on the Application of Data Encryption Technology in Communication Security.

Networked TT&C for Mega Satellite Constellations: A Security Perspective

A Lightweight and Secure Group Key Based Handover Authentication Protocol for the Software-Defined Space Information Network.

Exploring active attacks for three incorrect implementations of the ISO/IEC 9798 in satellite networks

Research and Implementation of TT&C and Communication Integrated System for Micro-satellites and Nano-satellites

Satellite Cybersecurity Reconnaissance: Strategies and their Real-world Evaluation

Secure Communications in Hybrid Cooperative Satellite-Terrestrial Networks